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System Engineering Sa 


University 


When the pieces are put together, will system work? 


= System-level design 
e Requirements management 
e Architecture (hardware, software, power, ...) 





= System integration 
e Component interfaces (sensors, software, hardware, ...) 


= Complexity & supplier management 
e Internal + external suppliers 
e Requirements to test plan linkage 
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Computer-Based System Safety Engineering shine: 


University 


Will the result be acceptably safe? 
= Safety engineering: 
e Identifying hazards & mitigation strategies 
—- Hazard analysis & safety concepts 
— Mitigations and safety validation 
e Ensuring acceptable safety 
— Safety requirements 
— Safety qualification (components, tools) 
= Safety culture: 


e Safety Management System (SMS) & standards conformance 
e Safety practices across design, deployment, operations 
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Typical Staffing Profile 





= Rough approximation of staffing proportions 
e Deep supply chain > more system & safety engineers at interfaces 


PROJECT EFFORT 
25% DEV: 2.5% Safety 
Design & Engineering 
20% DEV: Implement 7.5% System 
Peer Reviews Engineering 
& Unit Test 
ii its 5% SQA 






40% TEST: 
Integration Test 


& System Test : 
(security assumed to be 


part of system engineering) 
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Ra tata As tf As hie BN 
= Perception & prediction = a — 


e Safety of machine learning-based functions 
e Need more than object motion tracking 
= Safety of Intended Function (SOTIF) 
e Drive/Fix/Drive iteration with lots of testing 
— Waymo: 6M test miles; 65K deployed miles 
e How will safety be argued for larger fleets? 
— Likely will involve UL 4600 concepts and safety cases 
= Getting from “works OK’ to “safe” 
e You can brute force the first few “nines” ... but not all of them. 
e Field feedback into safety cases 
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Organizational Safety Challenges __ Uaheraiy 





= Significant pressure to deploy 
e Flurry of empty driver seat demos in 2020 
e Can teams take the time needed for safety? 


= Industry transparency needed 
e Safety collaboration rather than competition 
e Public trust in face of an adverse news event 





= Ensuring robust safety cultures Perdce deep apestorArber Bis Doe 
e Robotics meets automotive engineering 
e Silicon Valley culture + automotive culture + no human driver 
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Getting To 
Deployed + Safe 





“* 10% System & Safety Engineering staff 
“» Resolve open technical safety challenges 


“> Robust safety culture is crucial 
Carnegie 


Mellon 
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